Review Iac Consistency — Security skill for Claude Code
Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, and infrastructure changed outside version control.
How to install Review Iac Consistency
Installs to ~/.claude/commands/sourjya-kiro-rails-review-iac-consistency.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/commands/review-iac-consistency.md -o ~/.claude/commands/sourjya-kiro-rails-review-iac-consistency.md Restart Claude Code, or start a new session, for it to be picked up.
What Review Iac Consistency does
description: "Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, and infrastructure changed outside version control."
Before scanning, read `docs/decisions/` ADRs if they exist. Use documented infrastructure decisions (intentional per-environment differences, accepted cost trade-offs) to distinguish intentional configuration from accidental drift.
Act as a principal-level cloud infrastructure engineer and IaC architect performi
Alternatives in Security
- Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
- Dotclaude — A comprehensive development environment with specialized AI agents for code review, security analysis, and tec 435 ★
- Unifly Audit — Security audit of UniFi configuration 248 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Rls Audit
Supabase RLS & Postgres authorization audit: unprotected tables, permissive policies, self-elevation vectors,
Cve Env
Agentic CVE → Docker environment builder: given a CVE ID, builds and verifies a Docker environment running the
AWS Manager
AI-agent toolkit for managing multiple AWS accounts from your terminal. Tell your AI to scan resources, audit
Security Audit Database
Use when auditing a database-backed app for the most common database security mistakes — multi-tenant data lea
Fenceline
Audit coding-agent session logs for boundary violations after the fact — forbidden commands, escapes outside a
Iam Audit
🔒 Iam Audit
Related Agents
Security Devils Advocate
Adversarial security review of infrastructure, architecture, and code changes. Use before merging changes to T
Codebase Fit Reviewer
Reviews changed code for consistency with existing codebase patterns, helpers, and naming conventions. Catches
Ehs Infra Cloud
Infrastructure and cloud security specialist for the Ethical Hacker Squad. Reviews Terraform and other IaC, Do